$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json) Hash identifier: IXmog2DI76mD5XtxLStN1SA7k8YZgitKIwnDPAbNQGE= Subject key identifier: DF:D3:35:07:2D:64:21:F4:9B:07:79:07:B0:A9:75:5D:25:D1:0A:52 Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft Manifest number: 07D9 Signing time: Tue 12 May 2026 21:30:23 +0000 Manifest this update: Tue 12 May 2026 21:30:22 +0000 Manifest next update: Tue 19 May 2026 21:30:22 +0000 Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: gUwFbV0pUGaJqeqLHNsdwkYKpcQLAz8Q9t5KKwDlou4=) 2: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=) 3: 9507206A63A111F092E32646C4F9AE02.roa (hash: zbwsIMflxwphg5gU9UqOZAbwNHUfzLTXefSGHx8E9Ms=) 4: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: 07OvimTtnDe97y43gOmhP2mYLb6FKJ2TL30DbKiYSdk=) 5: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=) 6: 94A5320663A111F092E32646C4F9AE02.roa (hash: sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=) 7: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: 2PM2q9cUg2P0NzsrCEQgTadgMBgcus+n4gLLyMzQ2+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Validity Not Before: May 12 21:30:22 2026 GMT Not After : May 19 21:30:22 2026 GMT Subject: CN=6a039bef-81a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:82:57:36:b6:6b:49:88:1c:31:a5:e2:f4: 1b:8a:a7:f0:7f:45:d4:3a:06:45:6d:34:c1:d6:18: 09:05:7e:47:86:3e:9d:70:61:29:33:6d:6d:12:31: 68:55:56:06:8c:3d:7f:8b:4f:86:14:e4:b0:8d:6b: 46:57:f5:29:12:51:2b:43:5f:68:38:4e:a1:f7:ab: b1:80:aa:d1:ff:e1:a8:0a:3d:ce:6e:98:4b:74:32: e3:8b:db:73:a9:bf:49:4c:b4:55:7e:f1:20:0f:a6: ab:38:f6:a4:7e:96:c5:e7:ba:ae:de:8a:6b:00:b4: 7d:a7:12:b5:30:05:e8:76:61:64:d1:33:63:41:5f: 85:60:01:95:00:82:a0:36:1c:15:31:38:32:90:f0: ab:8e:5e:e6:65:9f:59:dc:6e:28:e8:5e:65:02:1f: 65:30:2e:6d:6f:2e:12:39:d4:83:b1:2e:fe:f5:eb: 05:56:cc:ef:c7:d9:2a:04:0e:b3:3e:fa:58:23:00: 91:d5:e5:e6:21:13:ad:64:b2:99:f9:94:1b:16:05: 3d:85:9f:50:84:18:09:12:50:75:7d:0c:00:31:3b: b4:94:13:29:85:13:d8:4e:82:c2:7c:c1:98:84:6b: 33:bb:93:d1:65:58:08:e6:bb:c7:5e:22:cd:8c:82: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D3:35:07:2D:64:21:F4:9B:07:79:07:B0:A9:75:5D:25:D1:0A:52 X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3f:bc:4f:c4:b2:f3:32:0b:fc:33:8d:dd:6f:3e:d6:57:b3: c1:e8:5a:1e:26:b3:f3:1c:8e:9c:30:10:85:ff:12:81:6a:9a: 38:4d:e1:94:88:42:10:c6:24:54:1b:d8:90:ee:26:ec:4d:c8: 38:5e:ca:23:ad:3d:e4:d2:7e:d6:b9:0b:f3:b9:34:3d:0e:9f: c9:b8:ec:8b:a0:65:20:cb:25:29:b2:c5:b1:8b:36:50:55:a3: b8:e2:dc:73:ce:88:3d:ab:bf:6a:41:61:38:62:f5:bb:13:6f: 87:fe:40:4c:f7:91:15:f1:02:2e:36:91:71:4d:7e:c7:55:08: 3a:f1:48:33:0d:e1:76:e1:dc:f5:1c:58:e5:65:48:40:20:85: 34:fd:71:79:0b:cd:a2:ca:ae:c7:b9:d2:d1:41:53:c1:d4:cc: a4:ea:5c:91:0f:b3:6d:fc:d0:dd:55:f4:fd:b8:f6:b8:17:85: a2:bf:d0:3f:4c:e3:74:38:a9:d1:66:2c:62:36:3c:73:0e:a8: 03:3e:13:49:06:40:bc:f4:a7:0c:f0:19:82:f1:88:ea:cc:f8: a0:5c:f7:a3:64:fd:01:bd:1e:ea:fa:ef:25:82:48:34:58:73: be:9a:ea:34:4b:31:6a:29:3e:c1:6d:23:4c:d6:2b:91:30:25: 5c:86:c0:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjYwNTEyMjEzMDIyWhcNMjYwNTE5MjEzMDIyWjAYMRYwFAYD VQQDEw02YTAzOWJlZi04MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pOCVza2a0mIHDGl4vQbiqfwf0XUOgZFbTTB1hgJBX5Hhj6dcGEpM21tEjFo VVYGjD1/i0+GFOSwjWtGV/UpElErQ19oOE6h96uxgKrR/+GoCj3ObphLdDLji9tz qb9JTLRVfvEgD6arOPakfpbF57qu3oprALR9pxK1MAXodmFk0TNjQV+FYAGVAIKg NhwVMTgykPCrjl7mZZ9Z3G4o6F5lAh9lMC5tby4SOdSDsS7+9esFVszvx9kqBA6z PvpYIwCR1eXmIROtZLKZ+ZQbFgU9hZ9QhBgJElB1fQwAMTu0lBMphRPYToLCfMGY hGszu5PRZVgI5rvHXiLNjIKNBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/TNQct ZCH0mwd5B7CpdV0l0QpSMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0Qy81MUE5RUFDQzQxNjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRH bHp3ZkVoWVIxYVhDb2JCcDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWT+8T8Sy8zIL/DON3W8+1lezwehaHiaz8xyOnDAQhf8SgWqaOE3hlIhCEMYk VBvYkO4m7E3IOF7KI6095NJ+1rkL87k0PQ6fybjsi6BlIMslKbLFsYs2UFWjuOLc c86IPau/akFhOGL1uxNvh/5ATPeRFfECLjaRcU1+x1UIOvFIMw3hduHc9RxY5WVI QCCFNP1xeQvNosqux7nS0UFTwdTMpOpckQ+zbfzQ3VX0/bj2uBeFor/QP0zjdDip 0WYsYjY8cw6oAz4TSQZAvPSnDPAZgvGI6sz4oFz3o2T9Ab0e6vrvJYJINFhzvprq NEsxaik+wW0jTNYrkTAlXIbAHA== -----END CERTIFICATE-----Generated at Wed May 13 12:35:39 2026 by rpki-client